Senior Security Engineer

Webot; Singapore; On-site; SGD 140,000 - 190,000; Full time

Job summary

Webot in Singapore is seeking a Workplace Security Engineer to design and implement security controls across identity, endpoint, network access, and data protection. You will own key security platforms and collaborate with IT, Cloud, and Compliance teams to meet financial industry security requirements.

Responsibilities include identity engineering for Google Workspace and AWS IAM Identity Center, zero trust and remote access, endpoint baselines, data protection with DLP tools, vulnerability

Qualifications

• 5+ years of security engineering experience with hands-on implementation.
• Proficient in at least one scripting language (Python/Go/PowerShell).
• Strong understanding of RESTful APIs and JSON/YAML processing.
• Experience with Infrastructure as Code (Terraform) for security.
• Deep experience in at least two areas from IAM/SSO, endpoint security, zero trust/VPN/SASE, or network/security fundamentals.

Responsibilities

• Own identity & access engineering across Google Workspace and AWS IAM Identity Center.
• Lead Zero Trust/remote access engineering and policy design with network teams.
• Define endpoint security baselines and enforcement across devices.
• Design data protection controls using Google Workspace DLP and Prisma Cloud DLP.
• Own vulnerability triage, risk rating, and patch governance workflows.
• Improve security monitoring, incident response, and post-incident improvements.
• Design, develop, and maintain security tools, scripts, and API integrations.
• Create runbooks and audit evidence pipelines for access control, remote access, and DLP.

Skills

Python/Go scripting

REST APIs

Git version control

Security tooling

Troubleshooting

Networking fundamentals

SIEM/EDR basics

Tools

Jamf Pro

ABM

Cortex XDR

Google Workspace

AWS IAM Identity Center

Prisma Access

GlobalProtect

Job description

We are looking for a Workplace Security Engineer to design, implement, and continuously improve corporate security controls across identity, endpoint, network access (VPN/ZTNA), and data protection. You will be the technical owner for key security platforms and work with IT, Cloud, and Compliance teams to meet financial industry security requirements.

Key Responsibilities

1) Identity & Access Engineering

• Own secure identity architecture across Google Workspace and AWS IAM Identity Center:
• Design group/role models, least privilege, and access governance processes.
• Improve SSO posture (SAML/OAuth), session policies, MFA enforcement, conditional access patterns where applicable.
• Lead onboarding of new SaaS apps into SSO and define standard patterns (SAML attributes, role mapping, break-glass access).

2) Zero Trust / Remote Access Engineering

• Own and optimize enterprise remote access and ZTNA/SASE through: Prisma Access / GlobalProtect; Prisma ZTNA / Prisma SASE; Google BeyondCorp (where applicable)
• Work with network teams on policy design, segmentation, and logging requirements.

3) Endpoint Security Engineering

• Define and enforce endpoint security baselines and compliance through: Jamf Pro + Apple Business Manager; Google Endpoint Management; Palo Alto Cortex XDR
• Drive improvements in device posture: encryption, OS baseline, EDR coverage, hardening, local admin controls.

4) Data Security & DLP Engineering

• Design and tune data protection controls through: Google Workspace DLP, Prisma Cloud DLP
• Define data classification patterns, DLP rules/exception workflows, and measurable reduction in risky exfiltration events.

5) Vulnerability & Patch Governance

• Own vulnerability scanning results triage, risk rating, remediation tracking, and verification.
• Define patch SLAs, exception workflows, and reporting; coordinate with IT/Ops/R&D teams (execution may be performed by owning teams).

6) Security Monitoring, Incident Response & Continuous Improvement

• Improve alerting quality and detection coverage across IAM/endpoint/network/DLP telemetry.
• Lead investigations for escalated incidents, produce incident reports and post-incident improvements (runbooks, control changes).

7) Security Automation & Tooling

• Design, develop, and maintain custom security tools, scripts, and API integrations to bridge gaps between disparate security platforms.
• Automate routine engineering tasks, compliance checks, and incident response workflows using SOAR tools or custom code (Python/Go).

8) Documentation & Audit Readiness

• Build security standards, runbooks, and audit evidence pipelines for access control, remote access, endpoint protection, and DLP.

Qualifications

• 5+ years in security engineering / IT security with strong hands-on implementation experience.
• - Proficient in at least one programming/scripting language (Python, Go, or PowerShell/Bash) with a track record of building tools or automation.
• Solid understanding of RESTful APIs, JSON/YAML processing, and version control systems (Git).
• Experience with Infrastructure as Code (Terraform) applied to security architecture is a strong plus.
• Deep experience in at least two of the following:
• IAM/SSO (Google Workspace / AWS IAM Identity Center, SAML/OAuth)
• Endpoint security (Jamf/ABM, EDR—Cortex XDR)
• Zero Trust / VPN / SASE (Prisma Access/GlobalProtect, Prisma ZTNA/SASE, BeyondCorp)
• Strong troubleshooting skills across Windows/macOS, and solid networking fundamentals.
• Experience supporting audits and producing evidence in regulated environments is a strong plus.

Nice to Have

• Scripting/automation (Python, Bash), IaC mindset, good operational excellence.
• Relevant certs: Palo Alto (PCNSA/PCNSE), Jamf certs, Google Workspace admin, AWS security.